Tools

bilawalsidhu/gods-eye-view

A spy satellite simulator in your browser, except the data is real. Live open source spatial intelligence on a photorealistic 3D globe.

tq17oa7/spyder-osint

Open-source intelligence (OSINT) tool for gathering information from phone numbers, IP addresses, social media, emails, usernames, domains, and…

qyvora/qyvora-toha3ee

Go-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…

cyb3r-monk/rita-j

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.

soufianetahiri/anxun-isoon

I-SOON/Anxun leak related stuff

owasp/owasp-open-source-intelligence-standard

An open, vendor-neutral verification standard for traceable, reviewable, and rights-aware open-source intelligence. Current release: OOVS v0.1.0.

firefart/hijagger

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

synacktiv/depfuzzer

Scans project dependencies for dependency confusion vulnerabilities and checks package owner email takeover risks across multiple registries (npm,…

knqyf263/crtsh

API client for crt.sh

jenderal92/reverse_ip_multithreading1

Multithreaded reverse IP lookup tool for discovering domains hosted on the same IP address.

cyeezy08/kimai-cve-2026-49865-poc

PoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) — Kimai time-tracking default APP_SECRET authentication bypass affecting versions ≤ 2.57.0

rmottanet/unauthscout

UnauthScout is an OSINT (Open Source Intelligence) tool developed in Bash for passive exploration of assets on version control platforms (GitLab and…

tanasescualexandrugabriel/vulnerability-assessment-and-osint-cve-2012-1823

This repository documents the process of identifying, analyzing, and gathering Open Source Intelligence (OSINT) on a specific security vulnerability…

lukebob-zz/c2-pwn

Uses Shodan API to pull down C2 servers to run known exploits on them.

staaldraad/fastfluxanalysis

Scripts to detect Fast-Flux and DGA using DNS query responses

ekultek/strutter

Proof of Concept for CVE-2018-11776

jaycelation/cve-2025-55182

PoC, Hunting React2Shell about CVE-2025-55182